Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
File:                     4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft (raw, json)
Hash identifier:          bgShWT746kYJOaT/yMfZXsnNmkeHbWwBfPwQHNOAJZM=
Subject key identifier:   2F:0B:FF:A6:C9:82:F3:1B:31:84:60:E6:B9:36:2E:38:0D:08:D4:48
Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
Certificate issuer:       /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Certificate serial:       2852
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
Manifest number:          27E3
Signing time:             Tue 28 Jul 2026 15:44:40 +0000
Manifest this update:     Tue 28 Jul 2026 15:44:39 +0000
Manifest next update:     Tue 04 Aug 2026 15:44:39 +0000
Files and hashes:         1: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl (hash: o+SETLDLiT8foyyCerD15zs75D/OTpy/g8cEycSsGK8=)
                          2: BCAE5314F75C11EB95BE8C87C4F9AE02.roa (hash: lki+CHXiL8jgebBM0y87J9S1Z38ejK6RVZBLe05r+fU=)
                          3: 6CED3FB2866C11F1879DBD6D59A30FBC.roa (hash: xnraMRAht75c6q0k/IWf70uaiaEKUbaOlcnjW+8YMmY=)
                          4: 253C821A388611ECBE8F7725C4F9AE02.roa (hash: msg45GhibqVfY+xRxDR7oBrJaU3IgBi5F9syEpc2quM=)
                          5: 54F4ED62A4D511EA863BC00AC4F9AE02.roa (hash: zy3egj4OMiHO48ljcoYfTBvfVuw49NEk7RLswgs1WQc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
                          rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:44:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10322 (0x2852)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A622F, serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
        Validity
            Not Before: Jul 28 15:44:39 2026 GMT
            Not After : Aug  4 15:44:39 2026 GMT
        Subject: CN=6a68ce68-e06a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d0:98:bc:0d:d8:73:d1:f4:a4:c2:6b:75:23:
                    7b:f1:1b:b0:40:93:aa:9e:80:68:61:9e:ff:fe:9a:
                    cf:f5:66:3a:f7:c5:d4:a9:08:c4:89:b6:93:94:b6:
                    e3:3a:6e:d3:3c:25:cf:40:37:53:3d:4c:73:b5:38:
                    5c:61:06:54:72:3a:76:7e:98:e9:5b:4f:0b:24:68:
                    84:4d:13:37:d2:5b:00:aa:c7:22:a8:8b:be:f2:47:
                    8f:a2:0b:82:ce:9a:d8:98:ec:cd:25:d4:f9:13:39:
                    f5:31:8a:50:26:b4:2c:ec:fd:86:f2:87:c4:44:9e:
                    ee:d3:bb:a1:f4:ad:b5:d7:bf:d3:16:8d:00:c9:66:
                    cc:bb:1a:92:fa:7b:73:cf:6f:ef:7f:cc:68:23:e7:
                    0d:d1:79:aa:fc:0b:cb:ca:1e:c4:d8:af:a3:d7:90:
                    56:d0:5b:3b:cc:2a:81:da:3f:ed:c3:3f:aa:00:94:
                    a2:44:25:cb:6b:d8:e4:39:a5:2d:55:c9:24:03:b3:
                    b3:46:e7:d8:6d:42:59:64:49:ff:3c:0d:aa:fd:34:
                    d1:ac:13:8b:6b:9e:45:fb:ad:3c:bb:d2:66:f7:e6:
                    52:42:c0:83:56:1e:71:39:3b:d0:62:74:47:37:cc:
                    cc:a9:74:78:ed:e7:9f:73:0c:f1:17:00:1e:a3:59:
                    d4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0B:FF:A6:C9:82:F3:1B:31:84:60:E6:B9:36:2E:38:0D:08:D4:48
            X509v3 Authority Key Identifier:
                keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:45:82:f2:d5:41:a0:89:59:b4:81:d5:b2:df:29:fb:7f:99:
         b3:01:8c:bb:3c:2f:a7:90:63:fc:e4:88:93:ab:ea:36:7d:0c:
         68:b5:1a:ff:c4:55:57:dd:48:50:6a:2b:6b:d6:4c:9f:0b:ac:
         78:75:5f:78:11:42:2d:a9:f9:5b:73:20:92:fb:78:6b:9b:a2:
         1e:4a:f6:d6:c7:27:4d:c4:65:0d:75:c5:4f:a8:aa:0c:51:87:
         79:e8:d6:5a:e4:ca:0a:7a:06:62:56:a3:e6:29:74:92:6a:76:
         c4:0f:ec:27:72:8f:c4:70:c9:84:56:da:67:50:d1:94:e3:53:
         b1:eb:45:e9:69:a4:fe:e5:c3:46:3e:31:99:0f:c3:4a:de:dc:
         ea:cd:6e:43:05:8a:dd:d1:30:1d:11:46:40:59:cb:9d:e9:49:
         8d:cb:df:8e:e5:aa:e4:ca:a0:46:bc:92:0e:84:b8:25:c0:de:
         5c:be:38:97:ec:a5:5b:77:ec:be:e5:d5:33:52:8d:e7:20:a1:
         d7:7f:94:68:9d:0c:d2:a0:93:f9:cd:c5:63:b5:d1:2a:bd:06:
         7b:96:53:74:30:3d:af:78:59:85:79:a4:ce:9c:33:f6:58:22:
         5d:42:80:cc:c0:d7:d9:16:ee:f3:88:ce:22:de:8c:00:3b:81:
         d6:75:6f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:56:13 2026 by rpki-client